Digi TransPort WR31 User Manual page 411

Configure Virtual Private Networking (VPN)
Bring this tunnel up
Controls how the IPsec tunnel is brought up. The options are:
All the time
•
Whenever a route to the destination is available
•
On demand
•
If the tunnel is down and a packet is ready to be sent
Defines the action that is performed when the IPsec tunnel is down and a packet needs to be
sent. The options are:
Bring the tunnel up
•
Drop the packet
•
Send the packet without encryption and authentication
•
Bring this tunnel down if it is idle for h hrs m mins s secs
Used when the IPsec tunnel is configured to come up on demand and defines how long the IPsec
tunnel should remain up if there is no traffic is being sent on the tunnel.
Renew the tunnel after
Defines the constraints of when the IPsec tunnel SA has to be renewed.
h hrs m mins s secs
Renew the IPsec SA after the specified amount of time.
n units of traffic
Renew the IPsec SA after the specified amount of traffic has been passed over the tunnel. The
traffic units can be specified as Kbytes, Mbytes or Gbytes. A value of 0 disables this parameter.
SAs will expire and be renewed based on time, rather than amount of traffic.
Digi TransPort WR Routers User Guide
IPsec parameters
411